Fortinet black logo

Administration Guide

Home FortiSandbox 4.4.1 Administration Guide
4.4.1
4.4.5
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6

Settings

Settings

Go to System > Settings to configure the administrator account settings.

GUI

Idle timeout

Length of time before FortiSandbox logs out an inactive user, from 1 to 480 minutes.

Language

Change the GUI language.

Show alarms of unprocessed detections in Notifications on Header Bar

Enable this option to show notifications in the top banner. Select the time period and rating of notifications. You must log out and log back in to show notifications. Click the notification to go to Dashboard > Operation Center to see the details.

VM External Network Access

Allow Virtual Machines to access external network through outgoing port3

Enable to allow Virtual Machines to access external network through the outgoing port3. For further details, refer to the port3 (VM outgoing interface) topic in Interfaces.

Status

Port3 status to access the Internet.

Gateway

Enter the next hop gateway IP address.

The System and VM cannot use the same gateway to access the Internet.

Disable SIMNET if Virtual Machines are not able to access external network through outgoing port3

Enable to disable SIMNET when Virtual Machines are not able to access external network through the outgoing port3.

DNS

DNS server used by VM images when a file is scanned.

Use Proxy

Enable to use the proxy. Configure the Proxy Type, Server Name/IP, Port, Proxy Username, and Proxy Password.

When the proxy server is enabled, all the non UDP outgoing traffic started from Sandbox VM will be directed to the proxy server.

When a proxy server is used, if the proxy server type is not SOCKS, the system level DNS server is used. If the type is SOCKS5, users need to configure an external DNS server that port3 can access.

For other traffic started by FortiSandbox firmware, such as FortiGuard Distribution Network (FDN) upgrades, the configurations should be done under the FortiGuard menu.

Proxy Type

Select the proxy type from the dropdown list. The following options are available:

  • HTTP Connect
  • SOCKS v4
  • SOCKS v5; requires DNS

UDP protocol is not supported.

Server Name/IP

Enter the proxy server name or IP address.

Port

Enter the proxy server port number.

Proxy Username

Enter a proxy username.

Proxy Password

Enter the proxy password.

Data Storage

Delete original files of Clean or Other rating after

Enable to delete all traces of jobs of Clean or Other ratings after a specified time. If the time is 0, the original files with either Clean or Other ratings will not be kept on the system. Original files with Clean or Other rating can be kept in the system for a maximum of 4 weeks.

Delete original files of Malicious or Suspicious rating after

Enable to delete original files with Malicious or Suspicious ratings after a specified time.

Delete all traces of jobs of Clean or Other rating after

Enable to delete all traces of jobs with Clean or Other ratings after a specified time. Traces of jobs with Clean or Other rating can be kept in system for a maximum of 4 weeks.

Delete all traces of jobs of Malicious or Suspicious rating after

Enable to delete all traces of jobs with Malicious or Suspicious ratings after a specified time. The setting time also affects records in Network Alerts.

Download of Original file

Set customized password for original files

Enter a password for the original sample when downloaded from FortiSandbox.

Include a readme file containing extraction password in downloaded job package

All downloaded archive files will have a readme file with the customized password. When disabled, the readme file will be removed from the downloaded archive file.

Reset all widgets

Reset all widgets in Dashboard > Status.
Note

By default, job traces of files with a Clean or Other rating will be kept for three days.
Previous
Next

Settings

Go to System > Settings to configure the administrator account settings.

GUI

Idle timeout

Length of time before FortiSandbox logs out an inactive user, from 1 to 480 minutes.

Language

Change the GUI language.

Show alarms of unprocessed detections in Notifications on Header Bar

Enable this option to show notifications in the top banner. Select the time period and rating of notifications. You must log out and log back in to show notifications. Click the notification to go to Dashboard > Operation Center to see the details.

VM External Network Access

Allow Virtual Machines to access external network through outgoing port3

Enable to allow Virtual Machines to access external network through the outgoing port3. For further details, refer to the port3 (VM outgoing interface) topic in Interfaces.

Status

Port3 status to access the Internet.

Gateway

Enter the next hop gateway IP address.

The System and VM cannot use the same gateway to access the Internet.

Disable SIMNET if Virtual Machines are not able to access external network through outgoing port3

Enable to disable SIMNET when Virtual Machines are not able to access external network through the outgoing port3.

DNS

DNS server used by VM images when a file is scanned.

Use Proxy

Enable to use the proxy. Configure the Proxy Type, Server Name/IP, Port, Proxy Username, and Proxy Password.

When the proxy server is enabled, all the non UDP outgoing traffic started from Sandbox VM will be directed to the proxy server.

When a proxy server is used, if the proxy server type is not SOCKS, the system level DNS server is used. If the type is SOCKS5, users need to configure an external DNS server that port3 can access.

For other traffic started by FortiSandbox firmware, such as FortiGuard Distribution Network (FDN) upgrades, the configurations should be done under the FortiGuard menu.

Proxy Type

Select the proxy type from the dropdown list. The following options are available:

  • HTTP Connect
  • SOCKS v4
  • SOCKS v5; requires DNS

UDP protocol is not supported.

Server Name/IP

Enter the proxy server name or IP address.

Port

Enter the proxy server port number.

Proxy Username

Enter a proxy username.

Proxy Password

Enter the proxy password.

Data Storage

Delete original files of Clean or Other rating after

Enable to delete all traces of jobs of Clean or Other ratings after a specified time. If the time is 0, the original files with either Clean or Other ratings will not be kept on the system. Original files with Clean or Other rating can be kept in the system for a maximum of 4 weeks.

Delete original files of Malicious or Suspicious rating after

Enable to delete original files with Malicious or Suspicious ratings after a specified time.

Delete all traces of jobs of Clean or Other rating after

Enable to delete all traces of jobs with Clean or Other ratings after a specified time. Traces of jobs with Clean or Other rating can be kept in system for a maximum of 4 weeks.

Delete all traces of jobs of Malicious or Suspicious rating after

Enable to delete all traces of jobs with Malicious or Suspicious ratings after a specified time. The setting time also affects records in Network Alerts.

Download of Original file

Set customized password for original files

Enter a password for the original sample when downloaded from FortiSandbox.

Include a readme file containing extraction password in downloaded job package

All downloaded archive files will have a readme file with the customized password. When disabled, the readme file will be removed from the downloaded archive file.

Reset all widgets

Reset all widgets in Dashboard > Status.
Note

By default, job traces of files with a Clean or Other rating will be kept for three days.
Previous
Next